What should the resource be for ses:SendEmail and ses:SendRawEmail?

Question

I want to create a policy that allows sending email from [email protected] to any email address.

Here is my policy:

data "aws_iam_policy_document" "ses_send" {
  statement {
    actions = [
      "ses:SendEmail",
      "ses:SendRawEmail",
    ]

    resources = [
      "*",
    ]
  }
}

This works. However, I want to replace the wildcard resource with a concrete one.

What should I put here?

Note I am using Terraform, so can likely pull it from another resource, e.g. aws_ses_email_identity